
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier: QLDr5Xahvrp7zxb4TgiwuVurLHMVHwiuPE2t3BdRpHQ=
Subject key identifier: D7:03:E9:3C:43:54:5B:D1:BD:EF:B4:F3:3B:2D:D9:B1:73:34:5D:37
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 29D990B9A89193A91E51CB9E62EDBA88E13D6325
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number: 74
Signing time: Mon 27 Jul 2026 02:56:23 +0000
Manifest this update: Mon 27 Jul 2026 02:51:23 +0000
Manifest next update: Tue 28 Jul 2026 03:16:23 +0000
Files and hashes: 1: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: yBoCJqllUXLECTLg/Gql1ybL6ZBJIEdqwLgRy5Off48=)
2: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
3: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
4: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
5: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
6: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
7: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
8: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
9: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
10: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
11: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
12: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
13: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
14: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
15: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
16: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
17: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d9:90:b9:a8:91:93:a9:1e:51:cb:9e:62:ed:ba:88:e1:3d:63:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: Jul 27 02:51:23 2026 GMT
Not After : Jul 28 03:16:23 2026 GMT
Subject: CN=D703E93C43545BD1BDEFB4F33B2DD9B173345D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:23:c8:04:23:42:6e:f4:76:b6:3e:94:93:
48:28:a0:1f:ab:ec:ed:00:04:cf:ba:69:1a:23:50:
71:7d:6d:28:88:90:13:b2:ae:51:3d:17:40:a7:db:
d1:bb:95:e5:67:b2:f7:0c:a9:38:cf:75:bc:0d:8e:
cb:31:e2:22:b7:b8:02:28:bb:a9:8f:44:06:9d:47:
87:2d:cd:6e:92:d7:ca:1f:58:a5:28:4f:c3:2d:95:
68:a5:cd:0a:0d:92:92:58:7e:f0:e0:ac:05:73:e9:
df:d0:11:1b:cc:2d:ba:0d:55:34:e7:c8:46:9e:88:
6f:8a:2a:cf:c0:ab:97:39:17:75:b8:47:f8:97:13:
8c:46:05:e1:39:7f:56:53:36:a6:7a:eb:f6:93:3b:
c0:5f:f0:50:3b:7a:64:bf:dd:b7:58:e7:d9:06:fa:
4b:fe:b1:6e:3b:95:ce:5a:a1:e9:a7:de:20:1a:e3:
cf:4a:87:ad:5e:55:e6:e3:99:74:b2:92:3c:10:e7:
83:1c:b4:cd:bd:31:c9:5c:3d:fd:f6:a5:4e:b0:71:
f2:77:ba:71:8b:53:46:02:0d:1d:d3:bc:ef:3d:fc:
0d:67:06:5a:fe:d0:fb:ce:e5:89:2e:7c:14:55:c6:
fb:da:6f:72:fe:49:17:0e:e0:aa:00:ae:a0:ff:a9:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:03:E9:3C:43:54:5B:D1:BD:EF:B4:F3:3B:2D:D9:B1:73:34:5D:37
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:e3:ae:fd:d0:45:da:39:5e:56:2c:7c:f9:98:c6:a8:92:
90:5e:83:7b:42:63:df:58:7f:96:7e:95:47:4c:12:86:3e:6e:
19:4f:58:a7:28:41:67:de:c9:6e:39:87:ed:3a:c1:b2:9c:00:
a0:dc:78:1e:89:21:bd:2d:22:57:e4:d0:de:0f:d6:45:0f:fb:
55:f7:a1:f4:c8:2b:db:40:c3:7a:31:40:6a:21:5d:04:74:39:
8d:e6:af:bc:4a:ca:fb:a5:5a:5d:7c:79:2c:69:95:25:b9:21:
da:43:f7:e3:a6:0c:87:98:ca:fa:c1:61:da:c8:b2:93:35:2e:
7f:fa:be:b3:0b:32:94:f8:41:99:f6:5e:c8:8d:2b:d3:2a:e7:
e2:36:ab:43:8b:d8:11:16:4b:97:78:43:cd:1e:94:de:65:1b:
6b:d6:36:a5:8f:08:58:fb:4e:20:6d:0b:bd:9a:19:3f:2a:75:
aa:af:b2:c9:3f:76:da:f2:cc:97:7f:0b:89:50:28:81:d7:2b:
86:ab:4c:a7:5b:d5:87:42:50:64:a5:06:96:aa:31:cb:a8:77:
f8:b1:d1:28:7c:76:72:c1:1f:d0:ec:30:f9:0a:0c:28:fc:10:
f9:c5:73:a0:19:77:f2:cf:11:79:06:ee:0a:d2:65:33:9d:95:
fe:45:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:36:25 2026 by rpki-client